Don't allow negative date components in ParseCertificateDate(), or ones starting with a plus.

net/cert/x509_cert_types.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/x509_cert_types.h"
 
 #include <cstdlib>
 #include <cstring>
 
 #include "base/logging.h"
-#include "base/strings/string_number_conversions.h"
 #include "base/strings/string_piece.h"
 #include "base/time/time.h"
+#include "net/base/parse_number.h"
 #include "net/cert/x509_certificate.h"
 
 namespace net {
 
 namespace {
 
 // Helper for ParseCertificateDate. |*field| must contain at least
 // |field_len| characters. |*field| will be advanced by |field_len| on exit.
 // |*ok| is set to false if there is an error in parsing the number, but left
 // untouched otherwise. Returns the parsed integer.
 int ParseIntAndAdvance(const char** field, size_t field_len, bool* ok) {
   int result = 0;
-  *ok &= base::StringToInt(base::StringPiece(*field, field_len), &result);
+  *ok &=
+      ParseNonNegativeDecimalInt(base::StringPiece(*field, field_len), &result);
   *field += field_len;
   return result;
 }
 
 }
 
 CertPrincipal::CertPrincipal() {
 }
 
 CertPrincipal::CertPrincipal(const std::string& name) : common_name(name) {}
@@ skipping 36 matching lines @@
   valid &= exploded.HasValidValues();
 
   if (!valid)
     return false;
 
   *time = base::Time::FromUTCExploded(exploded);
   return true;
 }
 
 }  // namespace net